Threat Exposure Management Analyst

What you'll do

• Analyze how individual exposures chain into viable attack paths toward critical assets.
• Build and operate a threat-informed prioritization model to rank exposures by real-world risk.
• Validate whether prioritized exposures are exploitable and reachable using various security testing methods.
• Assess the effectiveness of compensating controls before mandating remediation based on red-team findings.
• Drive remediation across infrastructure and security partner teams for risks that cross organizational boundaries.

What we're looking for

• 8+ years of experience in vulnerability management or related cybersecurity disciplines.
• Proven ability to lead security programs with governance and cross-functional stakeholder engagement.
• Strong capability in assessing attack paths, exploitability, and business impact beyond CVSS scoring.
• Practical experience incorporating threat intelligence and exploit data into prioritization decisions.
• Solid understanding of vulnerabilities across various environments and their combination into attack paths.
• Demonstrated skill in driving remediation and influencing cross-functional teams without direct authority.
• Familiarity with Gartner CTEM model, MITRE ATT&CK, CVSS, EPSS, and CISA KEV standards.